
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: qYGQRsE99iIeRxIYj+O+ILxYfpfdFjOjtDG48gV2QDg=
Subject key identifier: 13:00:2F:DC:71:C8:C4:2F:14:23:E8:39:24:8F:BC:49:EF:4F:61:A6
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019E209131ABD5FA7726C055F3A6A525FD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0BE8
Signing time: Wed 13 May 2026 09:00:46 +0000
Manifest this update: Wed 13 May 2026 09:00:46 +0000
Manifest next update: Thu 14 May 2026 09:00:46 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: HF+F3Ku71yUn1V17F80b3OiIqmvNAUZxbE+m1RhQO/k=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:31:ab:d5:fa:77:26:c0:55:f3:a6:a5:25:fd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: May 13 09:00:46 2026 GMT
Not After : May 14 09:00:46 2026 GMT
Subject: CN=13002fdc71c8c42f1423e839248fbc49ef4f61a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:fd:b2:84:80:f0:f1:2d:57:43:5b:7c:cf:
69:a9:3a:9d:b4:3f:1b:bf:34:67:86:ee:ab:34:89:
ad:dc:7d:40:f2:fc:c2:59:fc:99:68:f0:05:63:ef:
bc:57:c5:43:b2:b1:ea:4f:d9:44:f2:e4:05:7e:be:
2d:a5:35:04:ad:6f:15:14:4f:a1:d6:4b:15:e6:44:
9b:2a:19:31:31:f6:93:db:3f:1a:e3:b5:81:84:f7:
fd:b4:7e:24:b7:ac:35:75:9e:ec:ee:59:ba:db:96:
b0:9f:b5:3d:a2:89:27:30:1a:aa:f0:11:d0:08:78:
93:69:02:1a:38:e2:24:a1:29:23:4d:e3:05:d4:13:
ba:f5:1d:22:34:11:66:5c:33:78:ea:75:28:c0:f1:
9c:cd:b7:07:7e:79:f6:fc:ca:d1:14:ad:9c:1f:da:
9b:46:45:90:b7:f3:79:a8:c5:fc:80:98:ba:da:0d:
9c:15:5c:31:3b:d1:70:1f:21:bf:52:27:37:be:d5:
c6:87:80:7f:6d:cb:4e:91:83:dd:d2:0a:66:49:5c:
07:4e:5f:59:79:bf:50:26:51:84:f3:40:09:83:27:
35:18:71:c3:14:7d:2c:c8:79:f2:d5:b3:75:e0:45:
f2:cf:79:6a:55:79:03:45:a1:ac:84:26:90:3c:a7:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:2F:DC:71:C8:C4:2F:14:23:E8:39:24:8F:BC:49:EF:4F:61:A6
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:11:d3:13:87:3d:9d:7e:ca:11:d6:3d:bb:6d:3b:26:73:ca:
42:97:4d:43:4f:63:8b:53:7f:51:ee:31:9f:8e:0b:3e:85:cd:
96:4d:a6:29:1c:b2:99:94:b2:da:7f:46:81:c4:11:ac:40:4a:
57:6f:25:d8:e8:6c:84:9b:12:ea:eb:71:a1:db:60:6d:ca:a9:
fc:de:8a:69:64:23:9a:5d:33:79:ef:e1:dd:c9:f7:9d:e8:c5:
21:d8:3f:4c:e0:14:a7:65:33:6a:06:c9:d8:a0:f6:46:e2:de:
5b:8e:c3:bd:b1:f2:59:ff:64:dc:4c:d0:d0:50:e3:cb:dd:f9:
42:06:d1:35:cf:2c:dc:21:f6:af:0e:b4:48:58:ca:f0:86:f5:
d6:32:7b:4d:c6:15:5f:41:16:80:7b:a7:70:23:c5:e2:a2:15:
38:f2:9a:90:09:80:38:8b:e8:67:76:1c:36:d9:47:f1:f7:22:
cf:34:c5:82:9d:fa:58:b4:ad:44:56:01:1d:21:b4:3d:2a:a6:
b5:76:8d:86:59:92:fc:c8:d7:4e:e7:ac:62:3c:c0:6c:1d:72:
61:77:93:59:f4:75:d9:e5:00:77:24:51:3c:cd:88:82:db:70:
26:2a:ba:02:99:47:50:8b:af:0b:e0:bc:fd:55:9f:2e:83:92:
6c:fd:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:00 2026 by rpki-client